Post #1305459
2026-02-11 13:12 UTC
> An attacker could trick a user into clicking a malicious link inside a Markdown file opened in Notepad, causing the application to launch unverified protocols that load and execute remote files.
"launching unverified protocols" - does that mean the network fetching is done by the Notepad app, and Notepad doesn't open the browser for this..? If so, bloody hell, Microsoft...
Replies (1)
-
@ClassyHatter@sopuli.xyz 2026-02-11 15:16
As I understood it, there can be specifically crafted links in Markdown documents, which, when clicked, will download a file and then execute it.